Creating conditional policies in ProxySG using CPL

Products

• Management Center - VA
• Management Center

Issue/Introduction

We can create conditional policies using if statement.

Environment

Sometimes there is a requirement to write single CPL policy and apply it for different products, software versions, or enforcement domains through Management center.
It is also easier to maintain a single CPL instead of different CPL per product, version or enforcement domains.

Resolution

CPL allows you to segregate policies as below: 

1. Product specific policy -
   • #if product=asg
     <CPL Rules>
     #endif
   • #if product=sg
     <CPL Rules>
     #endif
2. Enforcement domain specific policy -
   • #if enforcement=appliance
     <CPL Rules>
     #endif
   • #if enforcement=wss
     <CPL Rules>
     #endif
3. Software version specific policy
   • if release.version=6.7.5.19
     <CPL Rules>
     #endif